DEBIAN-CVE-2025-71108

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Handle incorrect numconnectors capability The UCSI spec states that the numconnectors field is 7 bits, and the 8th bit is reserved and should be set to zero. Some buggy FW has been known to set this bit, and it...

cups security update

An update is available for cups. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Common UNIX Printing System CUPS provides a portable printing layer for Linu...

CVE-2025-14613

creationtimestamp| type| source ---|---|--- 2026-01-14 07:31:35+00:00| seen| https://gist.github.com/Darkcrai86/ad244cc38e39683c77cf9eb62690d6b2 2026-01-14 08:04:03+00:00| seen| https://gist.github.com/Darkcrai86/9134b77f1396f4f1a020347dab3916da...

CVE-2025-68970

creationtimestamp| type| source ---|---|--- 2026-01-14 06:12:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcefybseyi2q...

CVE-2025-38132 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-azure, linux-aws, linux-vmware, linux-gcp...

MiracleLinux 4 : php-5.3.3-3.AXS4.8 (AXSA:2012-547:03)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-547:03 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated webpages. PHP also offers built-in...

MiracleLinux 3 : gnutls-1.4.1-3.5.1AXS3 (AXSA:2009-384:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-384:01 advisory. GnuTLS is a project that aims to develop a library which provides a secure layer, over a reliable transport layer. Currently the GnuTLS library implements the...

MiracleLinux 4 : bind-9.7.3-2.2.0.1.AXS4.P3 (AXSA:2011-406:01)

"The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-406:01 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves ho...

MiracleLinux 3 : neon-0.25.5-10AXS3.1 (AXSA:2009-403:02)

The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2009-403:02 advisory. neon is an HTTP and WebDAV client library, with a C interface; providing a high-level interface to HTTP and WebDAV methods along with a low-level...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000883 advisory. The usbiprecvxbuff function in drivers/usb/usbip/usbipcommon.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service out-of-bounds...

CVE-2026-20823

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

CVE-2026-20820 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

DEBIAN-CVE-2026-0877

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...

DEBIAN-CVE-2026-0879

Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...

CVE-2026-0491

creationtimestamp| type| source ---|---|--- 2026-01-13 03:02:15+00:00| seen| Telegram/gzP7g7M5unxqeE0obsD0sG4W6mS1OWin9PANHO7snP8yfs 2026-01-13 06:48:14+00:00| seen| https://vulnerability.circl.lu/bundle/79cf05e4-8e7e-4859-b145-d69bffb52412 2026-01-13 07:01:37+00:00| seen|...

Microsoft Windows Common Log File System Driver 安全漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

EUVD-2026-2005

TinyWeb is a web server HTTP, HTTPS written in Delphi for Win32. TinyWeb HTTP Server before version 1.98 is vulnerable to OS command injection via CGI ISINDEX-style query parameters. The query parameters are passed as command-line arguments to the CGI executable via Windows CreateProcess. An...

ALSA-2026:0464 Moderate: cups security update

The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: CUPS: Local denial-of-service via cupsd.conf update and related issues CVE-2025-61915 cups: Slow client communication leads to a possible DoS attack CVE-2025-584...

Sangfor Operation and Maintenance Management System 代码问题漏洞

Sangfor Operation and Maintenance Management System is an operation and maintenance management system from Sangfor. A code issue exists in Sangfor Operation and Maintenance Management System 3.0.8 and earlier versions, which is caused by incorrect manipulation of the File parameter in the file...